segfault in courier pop3login after microupdates

[HostaHost]

The automated microupdates appear to have replaced the pop3login file yesterday and since that time the server's been logging thousands of these:

pop3login[10300]: segfault at 0 ip 00007f83b827d59f sp 00007fff6a65cbd8 error 4 in libc-2.12.so[7f83b814b000+189000]
pop3login[11855]: segfault at 0 ip 00007fa9abce859f sp 00007fff6bbd0a08 error 4 in libc-2.12.so[7fa9abbb6000+189000]
pop3login[13411]: segfault at 0 ip 00007fa10245359f sp 00007fff0d3f81b8 error 4 in libc-2.12.so[7fa102321000+189000]
pop3login[21237]: segfault at 0 ip 00007f585d6ff59f sp 00007ffffbab15e8 error 4 in libc-2.12.so[7f585d5cd000+189000]
pop3login[22896]: segfault at 0 ip 00007f64cbd8759f sp 00007fff37c54e48 error 4 in libc-2.12.so[7f64cbc55000+189000]
pop3login[24515]: segfault at 0 ip 00007f743e79159f sp 00007fff396ad188 error 4 in libc-2.12.so[7f743e65f000+189000]
pop3login[26539]: segfault at 0 ip 00007f6dfeea759f sp 00007fff8737ebb8 error 4 in libc-2.12.so[7f6dfed75000+189000]


This is a CentOS 6 x86_64 server with Plesk 10.4.4.

 

[IgorG]

We have not released any updates for 10.4.4 yesterday and there wasn't any updates for pop3login. Last time pop3login has been updated in MU#5 2 Dec 2011

 

[IgorG]

What is version of libc, glibc?

 

[HostaHost]

What is version of libc, glibc?

glibc-2.12-1.80.el6_3.5
libc-client-2007e-11.el6

 

[IgorG]

You can send PM with login credentials for this server to me. We will check it.

 

[jreoyo]

We've the same problem. Can u detail a solution?

 

[Flamenetworks]

Hi,

we've the same problem too.

Plesk release: 10.4.4
Patch version: 47
OS: Debian 6.0.6
Arch: x86_64
libc6: 2.11.3-4
libc6-dev: 2.11.3-4
libc6-i386: 2.11.3-4

Errors:

pop3login[6967]: segfault at 0 ip 00007f080bd8b052 sp 00007fffa0206bc8 error 4 in libc-2.11.3.so[7f080bc83000+159000]
pop3login[6970]: segfault at 0 ip 00007f2bd6e9b052 sp 00007fffd53bf5f8 error 4 in libc-2.11.3.so[7f2bd6d93000+159000]
pop3login[7228]: segfault at 0 ip 00007fce5e71a052 sp 00007fffa82f9458 error 4 in libc-2.11.3.so[7fce5e612000+159000]
pop3login[7229]: segfault at 0 ip 00007fbd20a3b052 sp 00007fffef180c68 error 4 in libc-2.11.3.so[7fbd20933000+159000]

Regards,

F.

 

[IgorG]

Please fill template http://forum.parallels.com/showthread.php?t=106113 with all necessary details. I will forward it to developers.

 

[Flamenetworks]

PRODUCT, VERSION, MICROUPDATE, OPERATING SYSTEM, ARCHITECTURE

Parallels Plesk, 10.4.4, 47, Debian Squeeze 6.0.6, x86_64

PROBLEM DESCRIPTION

pop3login[27873]: segfault at 0 ip 00007f162a2cf052 sp 00007fff31d0e888 error 4 in libc-2.11.3.so[7f162a1c7000+159000]
pop3login[28128]: segfault at 0 ip 00007fc951cc5052 sp 00007fffa1a17bd8 error 4 in libc-2.11.3.so[7fc951bbd000+159000]
pop3login[28131]: segfault at 0 ip 00007f4b2c46e052 sp 00007fff9464dee8 error 4 in libc-2.11.3.so[7f4b2c366000+159000]

STEPS TO REPRODUCE

N/A

ACTUAL RESULT

Cannot login to Mail Server

EXPECTED RESULT

Mailbox access to work correctly without crashes

ANY ADDITIONAL INFORMATION

Installed libraries: libc6: 2.11.3-4 - libc6-dev: 2.11.3-4 - libc6-i386: 2.11.3-4

 

[IgorG]

Thanks. I have forwarded it to developers. Let's wait their answer.

 

[Flamenetworks]

Hi IgorG,

any updates from developers team?

Thanks,

 

[IgorG]

Hi IgorG,

any updates from developers team?

Thanks,

No. They are working on it.

 

[IgorG]

It's a very old bug. At least since Plesk 9.5.4.
Segfaults appears in the log when someone trying to login using different passwords. It may indicate about attempts to guess password for mail user. Bug reported. Affects nothing as far as I see.

WORKAROUND:
Close pop3/pop3s ports to force to use IMAP instead.

 

[HostaHost]

So the solution to your software crashing is to use something else?

 

[IgorG]

So the solution to your software crashing is to use something else?

If you try to google this problem you see that it is not only Plesk issue. So we assume that it is bug from courier imap side. Our developers will investigate it more deeply and if it is really our bug - it will be fixed.

 

[Flamenetworks]

It's a very old bug. At least since Plesk 9.5.4.
Segfaults appears in the log when someone trying to login using different passwords. It may indicate about attempts to guess password for mail user. Bug reported. Affects nothing as far as I see.

WORKAROUND:
Close pop3/pop3s ports to force to use IMAP instead.

Hi IgorG,

thanks for the updates.

How to close pop3/pop3s ports to force to use IMAP instead?

 

[Flamenetworks]

Hi IgorG,

would you please give a reply?

Thanks!

 

[IgorG]

Hi IgorG,

thanks for the updates.

How to close pop3/pop3s ports to force to use IMAP instead?

With corresponding iptables rules, for example

 

[Flamenetworks]

With corresponding iptables rules, for example

With this "solution" we've to make more than 3000 customers change e-mail clients setup. I don't think it's a good idea.

 

[Flamenetworks]

Is there any other suggestion about that?

Thanks,

F.